In import_tpm_key_cb() fix the wrong password loop

When calling import_tpm_key() once it initializes the key, but
a second call fails due to the key being already initialized. Ensure
that failure of import_tpm_key() leaves the key on a clear state.

Reported by James Bottomley <James.Bottomley@HansenPartnership.com>.

1 files changed, 1 insertions, 0 deletions

diff --git a/lib/tpm.c b/lib/tpm.c
index 23e44799a5..aac83186a0 100644
--- a/lib/tpm.c
+++ b/lib/tpm.c
@@ -688,6 +688,7 @@ import_tpm_key(gnutls_privkey_t pkey,
 	pTspi_Context_CloseObject(s->tpm_ctx, s->tpm_key);
 	s->tpm_key = 0;
       out_session:
+	_gnutls_privkey_cleanup(pkey);
 	tpm_close_session(s);
       out_ctx:
 	gnutls_free(s);